{
  "proposal_id": "USER-CATALOGUE-INFDEC-20261011-R1",
  "revision": "executor-preparation-2-owner-findings",
  "status": "prepared-not-approved-not-executed",
  "historical_proposal_manifest_sha256": "60b185aabbf6a8448c0c3aef57279b6741db1cd1361b8dab48be29df9f14f78e",
  "executor_sha256": "b0dbbb9786e927055030acf849a72e9a44e9d3d55c84efdf245e419d381684f3",
  "supervisor_transport_sha256": "3e594e0e8561100ae1eeb34d7208cd5b5e387ae56c29689f155aed94219770f3",
  "records_sha256": "23577cc4f3ea6c0ca43eb21ca0e3280eb53fb64e29b030dcd31251593f0f3f2f",
  "expected_runtime_image": "forgejo.coulomb.social/coulomb/user-engine@sha256:f239bbf332b8eb87320c86390fddca1dcb4f7c628a7af75e79dee8058d446a7b",
  "fresh_pod_uid_required": true,
  "deadline": "2026-10-12T23:59:59Z",
  "authority": "separate founder-approved supervised administrative exception; out-of-band supervisor validates native receipt",
  "existing_r2_does_not_approve_catalogue_mutation": true,
  "normal_pdp_refusal_required": true,
  "catalogue_entities": [
    "applications/informed-decision",
    "application_bindings/informed-decision"
  ],
  "target_tenant": "tenant:platform",
  "retained_events": [
    "application.registered"
  ],
  "new_endpoint": false,
  "runtime_image_change": false,
  "iam_grants": false,
  "credentials_exported": false,
  "budget_estimate": {
    "cost_eur_upper_bound": 0.1,
    "supervised_seconds_estimate": 300,
    "application_downtime_expected_seconds": 0
  },
  "risk": "Exactly one administrative catalogue mutation bypasses ordinary application.register PDP admission under an explicit maintenance exception, retaining genuine denial and truthful service attribution. Public browser login/MFA remains unverified; downstream events may prevent automatic rollback.",
  "rollback": "Only exact originally created rows; original consumed grant digest; before expiry; no dependencies; delivery lock; refuse any claimed/delivered/missing event; retain audits and dead-letter unsent registered event. No full downstream reversal claim. Dead-lettering stops automatic drain only; existing privileged targeted delivery/replay can revive the retained event. This maintenance grant authorizes neither; any later replay requires separate owner reconciliation/disposition.",
  "owner_review_required": [
    "User Engine audit/service attribution and transaction semantics",
    "NetKingdom exception scope, catalogue facts, event consumers/dead-letter semantics",
    "Custodian precise founder disposition and conditional close-down obligation"
  ]
}